CVE Tools
Sign in

CVE-2026-74232

Zbtlink MQWrt yunmgrd Cloud C2 Implant

Published: Aug 27, 2026Updated: Aug 27, 2026 Sources: CVE List NVDCWE-300
9.8CRITICAL
NVD MITRE
EPSS Score
0.5%
Top 60.7%
CISA KEV
Not in KEV
Exploits
No Known Exploits
Remediation
No Fix Available
Self-Check
Not available

Description

Zbtlink L3_V2_8 firmware 3.0.0.4.528, Zbtlink WE826-T2 firmware 19.1101, Zbtlink ZBT-7628 firmware 1.0.0.2.007, Zbtlink ZBT-ZBT7621 firmware 1.0.0.3.001, MoreQuick MQAC-7620, MQAC-7620A, MQAP-7620, MQAP-7620A, and MQAP-7628 firmware 1.0.0.2.000, AP522 firmware 1.0.0.2.014, AP7628 and HC5661A firmware 3.0.0.4.380, APG721B firmware 19.0809, HK300 firmware 1.0.0.2.032, and MAP-N10 firmware 1.0.0.2.044 ship a backdoor command-and-control implant (yunmgrd) reachable over an unauthenticated cleartext UDP channel to a hardcoded C2 server. A remote unauthenticated attacker on the network path can hijack the channel and execute arbitrary commands as root. The attacker can also modify DNS entries, exfiltrate PPPoE credentials, and open reverse SSH tunnels.

No summary for this CVE yet.

CVSS Vector Breakdown

AV:NAC:LPR:NUI:NS:UC:HI:HA:H
Exploitability
AV:NAttack Vector
Network
AC:LAttack Complexity
Low
PR:NPrivileges Required
None
UI:NUser Interaction
None
Scope
S:UScope
Unchanged
Impact
C:HConfidentiality
High
I:HIntegrity
High
A:HAvailability
High
Open in CVSS calculator →

Weaknesses

CWE-300CWE-506

Affected Products

MoreQuick
commercialaka greenbrowser
MQAC-7620On-prem
Consumer Software / browser
MQAC-7620AOn-prem
Consumer Software / browser
MQAP-7620On-prem
Consumer Software / browser
MQAP-7620AOn-prem
Consumer Software / browser
MQAP-7628On-prem
Consumer Software / browser
Zbtlink
L3_V2_8
WE826-T2
ZBT-7628
ZBT-ZBT7621
and 6 more affected products View all →

Exploitability

No known exploits, KEV entries, or remediation guidance available for this vulnerability yet.
Is your org exposed to CVE-2026-74232?We can run the check for you — a free external exposure review, no install. Check my exposure

References

http://vulncheck.com/blog/zbt-darklantern-speakingstone
vulncheck.com
https://www.vulncheck.com/advisories/zbtlink-mqwrt-yunmgrd-cloud-c2-implant
vulncheck.com
News mentions
3

Unlock Complete Vulnerability Intelligence

Get the full picture for CVE-2026-74232 and every CVE in our database. Create a free account — no credit card required.

Create Free Account
Plain-language analysis
Impact assessment and exploitation scenario in plain English
Attack graph visualization
Interactive attack path and kill chain mapping
Exploit details & PoC links
ExploitDB, Metasploit, GitHub PoCs with direct links
Nuclei scanner templates
Ready-to-use vulnerability scanner templates
Full remediation guide
Patch instructions, workarounds, and compliance impact
Interactive AI chat
Ask questions about this vulnerability in natural language
Related vulnerabilities
Semantically similar CVEs and attack patterns
REST API & MCP access
Integrate vulnerability data into your workflows